pcruvinel/shopify-apps
skills/shopify-apps/SKILL.md
Expert patterns for Shopify app development including Remix/React Router apps, embedded apps with App Bridge, webhook handling, GraphQL Admin API, Polaris components, billing, and app extensions. Use when: shopify app, shopify, embedded app, polaris, app bridge.
tools
Updated May 24, 2026
$ install --global
skillsauthnpx skillsauth add pcruvinel/antig shopify-appsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 24, 2026, 5:49 AM0.8s1 file scanned
SKILL.md
- name:
- shopify-apps
- description:
- Expert patterns for Shopify app development including Remix/React Router apps, embedded apps with App Bridge, webhook handling, GraphQL Admin API, Polaris components, billing, and app extensions. Use when: shopify app, shopify, embedded app, polaris, app bridge.
- source:
- vibeship-spawner-skills (Apache 2.0)
Shopify Apps
Patterns
React Router App Setup
Modern Shopify app template with React Router
Embedded App with App Bridge
Render app embedded in Shopify Admin
Webhook Handling
Secure webhook processing with HMAC verification
Anti-Patterns
❌ REST API for New Apps
❌ Webhook Processing Before Response
❌ Polling Instead of Webhooks
⚠️ Sharp Edges
| Issue | Severity | Solution | |-------|----------|----------| | Issue | high | ## Respond immediately, process asynchronously | | Issue | high | ## Check rate limit headers | | Issue | high | ## Request protected customer data access | | Issue | medium | ## Use TOML only (recommended) | | Issue | medium | ## Handle both URL formats | | Issue | high | ## Use GraphQL for all new code | | Issue | high | ## Use latest App Bridge via script tag | | Issue | high | ## Implement all GDPR handlers |
Related Skills
pcruvinel/zoom-automation
tools
VerifiedTrustedCommunity
Automate Zoom meeting creation, management, recordings, webinars, and participant tracking via Rube MCP (Composio). Always search tools first for current schemas.
SKILL.mdUpdated Jun 10, 2026
pcruvinel/zoho-crm-automation
tools
VerifiedTrustedCommunity
Automate Zoho CRM tasks via Rube MCP (Composio): create/update records, search contacts, manage leads, and convert leads. Always search tools first for current schemas.
SKILL.mdUpdated Jun 10, 2026
pcruvinel/zendesk-automation
tools
VerifiedTrustedCommunity
Automate Zendesk tasks via Rube MCP (Composio): tickets, users, organizations, replies. Always search tools first for current schemas.
SKILL.mdUpdated Jun 10, 2026
pcruvinel/zapier-make-patterns
tools
VerifiedTrustedCommunity
No-code automation democratizes workflow building. Zapier and Make (formerly Integromat) let non-developers automate business processes without writing code. But no-code doesn't mean no-complexity - these platforms have their own patterns, pitfalls, and breaking points. This skill covers when to use which platform, how to build reliable automations, and when to graduate to code-based solutions. Key insight: Zapier optimizes for simplicity and integrations (7000+ apps), Make optimizes for power
SKILL.mdUpdated Jun 9, 2026